Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/99104c50-40ff-4aaf-a209-be31ceda679b/0/3130332e3234392e31382e302f32332d3234203d3e20313530323036.roa
File:                     3130332e3234392e31382e302f32332d3234203d3e20313530323036.roa (raw, json)
Hash identifier:          3ugIlcuuXqkp88pDlQqHgUV8lCVQkQe57dqmhU494sM=
Subject key identifier:   7C:71:D1:C8:79:D2:63:1B:E7:A7:AB:9D:C0:B0:86:CD:FA:C7:C5:0B
Certificate issuer:       /CN=7550CB259B6FC4F92E6394C525534C077F5C7D27
Certificate serial:       32D87EE0AFCB4F82A5FC75C6F6B4CB91844BBE53
Authority key identifier: 75:50:CB:25:9B:6F:C4:F9:2E:63:94:C5:25:53:4C:07:7F:5C:7D:27
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7550CB259B6FC4F92E6394C525534C077F5C7D27.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/99104c50-40ff-4aaf-a209-be31ceda679b/0/3130332e3234392e31382e302f32332d3234203d3e20313530323036.roa
Signing time:             Wed 20 Aug 2025 03:00:01 +0000
ROA not before:           Wed 20 Aug 2025 02:55:01 +0000
ROA not after:            Wed 19 Aug 2026 03:00:01 +0000
asID:                     150206
IP address blocks:        103.249.18.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/99104c50-40ff-4aaf-a209-be31ceda679b/0/7550CB259B6FC4F92E6394C525534C077F5C7D27.crl
                          rsync://repo-rpki.idnic.net/repo/99104c50-40ff-4aaf-a209-be31ceda679b/0/7550CB259B6FC4F92E6394C525534C077F5C7D27.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7550CB259B6FC4F92E6394C525534C077F5C7D27.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Aug 2025 15:36:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:d8:7e:e0:af:cb:4f:82:a5:fc:75:c6:f6:b4:cb:91:84:4b:be:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7550CB259B6FC4F92E6394C525534C077F5C7D27
        Validity
            Not Before: Aug 20 02:55:01 2025 GMT
            Not After : Aug 19 03:00:01 2026 GMT
        Subject: CN=7C71D1C879D2631BE7A7AB9DC0B086CDFAC7C50B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4b:f3:4e:bb:55:6e:71:2e:1e:4b:05:7b:85:
                    2e:8e:9f:d2:a2:5a:be:f4:68:15:93:f0:65:cb:b6:
                    12:fb:06:4e:bf:a6:54:b2:5f:06:49:89:1f:ba:9d:
                    5b:41:80:df:31:03:9f:b0:18:a9:c2:6b:0a:ab:82:
                    56:06:f4:62:43:b2:7c:26:66:2f:0a:45:9b:f6:54:
                    90:45:32:a1:9b:56:a5:46:b6:a7:27:c1:2f:53:db:
                    76:64:64:7b:9b:0c:a9:4b:0f:ec:bd:69:de:82:7a:
                    74:47:3f:33:94:b3:20:63:86:4b:06:d6:91:49:9f:
                    b6:b3:8f:c8:86:5c:d6:03:6f:a2:48:d2:37:94:ca:
                    1a:a5:ae:18:51:1b:dc:53:28:98:c6:91:f2:e9:87:
                    cd:ef:6e:33:0c:6d:89:ad:3c:42:d9:7a:67:b1:37:
                    1a:8e:10:37:7f:68:64:db:d5:3a:a1:dd:66:f8:03:
                    99:5c:5f:fe:e1:b1:9f:40:ea:41:76:7c:f2:6c:57:
                    0a:24:7a:63:d5:a7:a9:73:13:19:fb:a4:7c:ed:fc:
                    26:cf:32:7f:b3:aa:fb:05:1f:d7:d9:43:e7:6b:ca:
                    62:37:19:66:b7:21:a4:81:25:9d:87:28:d9:90:31:
                    63:f9:ee:35:98:b6:cd:7d:0a:20:0c:97:ea:be:97:
                    6d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:71:D1:C8:79:D2:63:1B:E7:A7:AB:9D:C0:B0:86:CD:FA:C7:C5:0B
            X509v3 Authority Key Identifier:
                keyid:75:50:CB:25:9B:6F:C4:F9:2E:63:94:C5:25:53:4C:07:7F:5C:7D:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/99104c50-40ff-4aaf-a209-be31ceda679b/0/7550CB259B6FC4F92E6394C525534C077F5C7D27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7550CB259B6FC4F92E6394C525534C077F5C7D27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/99104c50-40ff-4aaf-a209-be31ceda679b/0/3130332e3234392e31382e302f32332d3234203d3e20313530323036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.249.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:83:35:82:58:80:bf:f7:70:23:e8:8d:04:84:14:1c:99:51:
         26:c6:cf:0c:a5:b7:b7:f0:cc:b6:16:2c:7c:e5:39:73:12:ff:
         ca:e8:0a:9b:7e:61:e2:d2:87:5c:bf:26:2d:33:42:76:0f:09:
         d3:73:4d:0e:1c:36:c9:b8:6b:54:d3:75:22:07:46:ec:e1:55:
         a2:2d:dd:bf:99:39:f6:b5:78:47:03:ea:37:17:6e:f8:e9:ed:
         2a:ab:e2:be:2e:5b:b2:45:2c:b8:96:49:2c:0c:1f:db:84:6d:
         4c:12:b8:35:1b:8c:ec:a4:7e:d0:66:0c:00:6f:8b:dd:6a:5c:
         d1:1c:9f:b1:0e:0c:e9:70:6f:9c:fa:88:a5:7f:b3:03:fb:4a:
         2f:94:66:24:c1:64:57:0f:ee:4e:c6:8c:03:12:4e:08:1b:4a:
         09:ab:65:11:6f:84:e0:76:e5:e1:75:c0:d7:5f:b7:ed:31:04:
         e2:1f:4b:94:45:99:08:85:3b:a3:5b:32:70:b4:0c:04:cf:13:
         d8:2c:9d:72:7a:ea:9e:d4:43:da:6b:65:a9:cd:bb:f6:73:92:
         8e:c0:80:4f:83:77:f3:49:b1:b3:1b:fc:25:46:aa:f4:1c:7d:
         f8:9d:70:02:00:4f:58:3c:cd:fe:43:5a:1c:19:22:59:43:ee:
         08:3f:fb:21
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUMth+4K/LT4Kl/HXG9rTLkYRLvlMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzU1MENCMjU5QjZGQzRGOTJFNjM5NEM1MjU1MzRDMDc3
RjVDN0QyNzAeFw0yNTA4MjAwMjU1MDFaFw0yNjA4MTkwMzAwMDFaMDMxMTAvBgNV
BAMTKDdDNzFEMUM4NzlEMjYzMUJFN0E3QUI5REMwQjA4NkNERkFDN0M1MEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCS/NOu1VucS4eSwV7hS6On9Ki
Wr70aBWT8GXLthL7Bk6/plSyXwZJiR+6nVtBgN8xA5+wGKnCawqrglYG9GJDsnwm
Zi8KRZv2VJBFMqGbVqVGtqcnwS9T23ZkZHubDKlLD+y9ad6CenRHPzOUsyBjhksG
1pFJn7azj8iGXNYDb6JI0jeUyhqlrhhRG9xTKJjGkfLph83vbjMMbYmtPELZemex
NxqOEDd/aGTb1Tqh3Wb4A5lcX/7hsZ9A6kF2fPJsVwokemPVp6lzExn7pHzt/CbP
Mn+zqvsFH9fZQ+drymI3GWa3IaSBJZ2HKNmQMWP57jWYts19CiAMl+q+l23bAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUfHHRyHnSYxvnp6udwLCGzfrHxQswHwYDVR0j
BBgwFoAUdVDLJZtvxPkuY5TFJVNMB39cfScwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
OTEwNGM1MC00MGZmLTRhYWYtYTIwOS1iZTMxY2VkYTY3OWIvMC83NTUwQ0IyNTlC
NkZDNEY5MkU2Mzk0QzUyNTUzNEMwNzdGNUM3RDI3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzU1MENCMjU5QjZGQzRGOTJFNjM5NEM1MjU1MzRDMDc3RjVD
N0QyNy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk5MTA0YzUwLTQwZmYtNGFhZi1h
MjA5LWJlMzFjZWRhNjc5Yi8wLzMxMzAzMzJlMzIzNDM5MmUzMTM4MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzNTMwMzIzMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ/kSMA0GCSqG
SIb3DQEBCwUAA4IBAQBjgzWCWIC/93Aj6I0EhBQcmVEmxs8Mpbe38My2Fix85Tlz
Ev/K6AqbfmHi0odcvyYtM0J2DwnTc00OHDbJuGtU03UiB0bs4VWiLd2/mTn2tXhH
A+o3F2746e0qq+K+LluyRSy4lkksDB/bhG1MErg1G4zspH7QZgwAb4vdalzRHJ+x
DgzpcG+c+oilf7MD+0ovlGYkwWRXD+5OxowDEk4IG0oJq2URb4TgduXhdcDXX7ft
MQTiH0uURZkIhTujWzJwtAwEzxPYLJ1yeuqe1EPaa2Wpzbv2c5KOwIBPg3fzSbGz
G/wlRqr0HH34nXACAE9YPM3+Q1ocGSJZQ+4IP/sh
-----END CERTIFICATE-----
Generated at Sun Aug 24 03:10:07 2025 by rpki-client